Listing of Claims 

1-66. (Cancelled) 

67. (Currently amended) A computer implemented method for adding tamper resistance to a 
software program, the method comprising: 

adding a silent guard variable to the software program; 

selecting a computation in the software program; 

determining an expected value of the silent guard variable at the execution point of 
the selected computation; 

setting the runtime value of the sil ent guard variable to the expected value of ths 
silent guard variable in the software program at a silent guard insertion point the silent guard 
insertion point being separate d from the execution point of the selected comnutatinn by a 
oluralitv of pro gram instructions of the software program: an d 

revising the selected computation to be dependent on the runtime value of the silent 
guard variable, such that the aolootod computation will ovaluato software program executes 
improperly if the runtime value of the silent guard variable is not equal to the expected value 
of the silent guard variable. 

68. (Previously presented) The method of claim 67, fiuther comprising: 
selecting a program variable in the software program; 

determining an expected value of the selected program variable at a dependency point 
in the software program; and 

making the runtime value of the silent guard variable dependent on the runtime value 
of the selected program variable at the dependency point. 
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69. (Previously presented) The method of claim 68, wherein the step of making the value of 
the silent guard variable dependent on the runtime value of the selected program variable 
comprises: 

computing the runtime value of the silent guard variable using a mathematical 
expression including the runtime value of the selected program variable and the expected 
value of the selected program variable at the dependency point. 

70. (Previously presented) The method of claim 67, wherein the step of revising the selected 
computation comprises: 

selecting a constant value used in the selected computation; and 
replacing the constant value with a mathematical expression that is dependent on the 
runtime value of the silent guard variable, such that the mathematical expression evaluates to 
the constant value if the runtime value of the silent guard variable is equal to the expected 
value of the silent guard variable. 

7 1 . (Previously presented) The method of claim 67, wherein the step of revising the selected 
computation comprises: 

selecting a computation variable used in the selected computation; 

determining an expected value of the computation variable at the execution point of 
the selected computation; and 

replacing the computation variable with a mathematical expression that is dependent 
on the runtime value of the silent guard variable, such that the mathematical expression 
evaluates to the expected value of the computation variable if the runtime value of the silent 
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guard variable is equal to the expected value of the silent guard variable. 



72. (Previously presented) The method of claim 67, wherein the step of revising the selected 
computation comprises: 

inserting a mathematical expression including the runtime value of the silent guard 
variable and the expected value of the silent guard variable into the selected computation. 



73-77. (Canceled) 



78. (Currently amended) A computer implemented method for adding tamper resistance to a 
software program, the method comprising: 

selecting a program variable in the software program; 
selecting a computation in the software program; 

determining an expected value of the program variable at the point of execution of the 
selected computation; and 

revising the selected computation to be dependent on the runtime value of the 
program variable, such that the o e leotod computation will ovaluato software program 
executes incorrectlv if the runtime value of the program variable is not equal to the expected 
value of the program variable. 

79. (Previously presented) The method of claim 78, wherein the step of revising the selected 
computation comprises: 

selecting a constant value used in the selected computation; and 
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replacing the constant value with a mathematical expression that is dependent on the 
runtime value of the program variable, such that the mathematical expression evaluates to the 
constant value if the runtime value of the program variable is equal to the expected value of 
the program variable. 



80. (Previously presented) The method of claim 78, wherein the step of revising the selected 
computation comprises: 

selecting a computation variable used in the selected computation; 

determining an expected value of the computation variable at the point of execution 
of the selected computation; and 

replacing the computation variable with a mathematical expression that is dependent 
on the runtime value of the program variable, such that the mathematical expression 
evaluates to the expected value of the computation variable if the runtime value of the 
program variable is equal to the expected value of the program variable. 

8 1 . (Previously presented) The method of claim 78, wherein the step of revising the selected 
computation comprises: 

inserting a mathematical expression including the runtime value of the program 
variable and the expected value of the program variable into the selected computation. 

82. (Currently amended) A computer implemented method for adding tamper resistance to a 
software program, the method comprising: 

selecting a program block containing a step necessary for proper execution of the 
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software program, the program block comprising at least one program instruction; 
selecting a silent guard for the program block; 

determining the expected value of the silent guard at the start of execution of the 
program block; and 

installing a branch instruction dependent on the silent guard in the software program, 
such that if the runtime value of the silent guard is not equal to the expected value of the 
silent guard then the branch instruction \^ill oquoo on iiicorroot branch causes the nrop ram 
block to be takea skipped, causinp the, so ftware nrogram to execute imp rnp^rlY 

83. (Previously presented) The method of claim 82, wherein the step of selecting a silent 

guard comprises: 

adding a silent guard variable to the software program; 
using the silent guard variable as the silent guard; and 

installing an initialization instruction for the silent guard variable that executes prior 
to the branch instruction in the software program, the initialization instruction setting the 
silent guard variable equal to the expected value of the silent guard. 

84.. (Previously presented) The method of claim 82, wherein the step of selecting a silent 
guard comprises: 

selecting a program variable in the software program; and 
using the program value as the silent guard. 
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85. (Previously presented) The method of claim 82, wherein the step of selecting a silent 
guard comprises: 

selecting an insertion point in the software program; 
selecting a program variable in the software program; 
determining the expected value of the program variable at the insertion point; 
making the runtime value of the silent guard dependent on the runtime value of the 
program variable, such that the runtime value of the silent guard equals the expected value of 
the silent guard if the runtime value of the program variable equals the expected value of the 
program variable at the insertion point. 



86. (Previously presented) The method of claim 85, wherein the step of making the runtime 
value of the silent guard dependent on the runtime value of the program variable, comprises: 

installing a mathematical computation that includes the runtime value of the program 
variable, such that the result of the mathematical computation is corrupted if the runtime 
value of the program variable is not equal to the expected value of the program variable at 
the insertion point; and 

setting the silent guard equal to the result of the mathematical computation. 

87. (Previously presented) The method of claim 86, wherein the silent guard computation uses 
both the expected value of the program variable and the runtime value of the program variable. 

88. (Currently amended) A recordable computer media having a tamper resistant software 
program recorded thereon, the tamper resistant software program comprising: 
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g floftwaro program comprioing ono or moro program inGtruotionfl; 
a program computation in tho floftvvaro program at an execution poin t in the software 
program: 

a silent guard variable in tho aoftwaro program having an expected value at the 
execution point; 

a program variable having an expected value at a dependency point in the 
software program, the depe ndency point being separated from the execution point bv a 
pluralitv of program instruct ions, the runtime value of the silent guard variable being 
dependent on the runtime value of the program variable at the dependencv point, such 
that the runtime value of th e silent guard variable will not equal the expected value of the 
silent guard va riable at the execution point if the runtime value of the program variable is 
not equal to the expect ed value of the program variable at the dependency point: and 
wherein the program computation is dependent on the runtime value of the silent guard 
variable, such that the program computation will evaluate improperly and the software 
program will execute i mproperly if the runtime value of the silent guard variable is not equal 
to the expected value of the silent guard variable. 

89. (Canceled) 

90. (Currently amended) The recordable computer media of claim-^ 88, wherein the runtime 
value of the silent guard variable is also dependent on the expected value of the program variable at 
the dependency point. 
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91. (Currently amended) A recordable computer media having a tamper resistant software 
program recorded thereon, the tamper resistant software program comprising: 

g Doftworo program oompriaing ono or moro program inotruotions; 

a program variable having an expected value at a first dependency point in the 
software program; tm4 

a silent guard variable having an expected value at the first dependency point; 

a mathematical computa tion that includes the runtime value of the silent p uard 
variable and an expected ter m, the expected term being set based on the expected vahie nf 
the silent guar d variable at the first dependency point; 

wherein tfie runtime value of the program variable is dependent on the result of the 
mathematical computation which is dependent on the runtime value of the silent guard 
variable, such that the runtime value of the program variable e quals will not equal t he 
expected value of the program variable at the first dependency point if the runtime value of 
the silent guard variable equals does not equal t he expected value of the silent guard variable 
at the first dependency poin t, which will cause the software program to execute improperly 

92. (Currently amended) The recordable computer media of claim 9 1 , the tamper resistant 
software program further comprising an initialization instruction initializing setting the value of 
the program variable at the first d ependency noint- tft equal to a function of t he runtime value of 
the oilont guard Erograin variable and the result of the mathematical computation n t thn firnt 
depondonoy point . 

93. (Cancelled) 
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94. (Currently amended) The recordable computer media of claim 9 1 , the tamper resistant 
software program further comprising a supplementary silent guard variable having an expected 
value at a second dependency point in the software program; 

wherein the expected value of the program variable at the second dependency point is not 
equal to the expected value of the program variable at the first dependency point; and the runtime 
value of the program variable at the second dependency point is dependent on the runtime value 
of the supplementary silent guard variable, such that the runtime value of the program variable 
equate will not equal t he expected value of the program variable at the second dependency point 
if the runtime value of the supplementary silent guard variable e quals does not eq ual the expected 
value of the supplementary silent guard variable at the second dependency poin t, which will 
cause the software program to execute improperlv . 

95 . (Currently amended) The recordable computer media of claim 9 1 , wherein the expected 
value of the program variable at a second dependency point is not equal to the expected value of 
the program variable at the first dependency point; and the silent guard variable has a second 
expected value at the second dependency point; and the runtime value of the program variable at 
the second dependency point is dependent on the runtime value of the silent guard variable at the 
second dependency point, such that the runtime value of the program variable e quals will not 
equal t he expected value of the program variable at the second dependency point if the runtime 
value of the silent guard variable equals does not equal t he expected value of the silent guard 
variable at the second dependency poin t, which will cause the software program to execute 
im properlv 
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96. (Currently amended) A recordable computer media having a tamper resistant software 
program recorded thereon, the tamper resistant software program comprising: 

a software program oomprioing ono or moro program instructions ; 

a program block containing a step necessary for proper execution of the software 
program, the program block comprising at least one program instruction; 

a silent guard in the software program having an expected value at the start of 
execution of the program block; 

a program variable having an expected value at an insertion point in the software 
program: the r untime value of the silent guard being dependent on the runtime value of the 
program variable at the insertion point, such that the runtime value of the silent guard equals 
the expected value of the silent guard if the runtime value of the program variable equals the 
expected value of the program variable at the insertion point: a nd 

a branch instruction in th e softwar e program dependent on the silent guard, the 
branch instruction being separated from the insertion point bv a plurality of program 
instructions of the software program: 

wherein the branch instruction will cause an incorroct branch the program block t o be takai 
skipped if the runtime value of the silent guard is not equal to the expected value of the silent 
guar d which will cause the software program to execute improperlv . 

97-98. (Cancelled) 

99. (Currently amended) The recordable computer media of claim-9»96, wherein the runtime 
value of the silent guard is made dependent on the runtime value of the program variable using a 
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mathematical computation that includes the runtime value of the program variable, wherein the result 
of the mathematical computation is corrupted if the runtime value of the program variable is not 
equal to the expected value of the program variable at the insertion point. 

100. (Currently amended) The recordable computer media of claim-^ 96, wherein the runtime 
value of the silent guard is also dependent on the expected value of the program variable at the 
insertion point. 

101 . (New) The method of claim 78, wherein the program variable is used in more than one 
instruction of the software program, and the last instruction to use the program variable before the 
point of execution of the selected computation during execution of the software program is separated 
from the point of execution of the selected computation by a plurality of program instructions not 
using the program variable. 



1 02. (New) The method of claim 83, wherein the installation point of the initialization instruction 
for the silent guard variable is separated from the installation point of the branch instruction by a 
plurality of program instructions of the software program. 

1 03. (New) The method of claim 85, wherein the insertion point is separated from the installation 
point of the branch instruction by a plurality of program instructions of the software program. 

1 04. (New) The recordable computer media of claim 94, wherein the first dependency point is 
separated from the second dependency point by a plurality of program instructions of the software 
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program. 



105. (New) The recordable computer media of claim 95, wherein the first dependency point is 
separated from the second dependency point by a plurality of program instructions of the software 
program. 

1 06. (New) A recordable computer media having a tamper resistant software program recorded 
thereon, the tamper resistant software program comprising: 

a silent guard variable having an expected value at a first dependency point in the 
software program; 

a program variable having an expected value at a second dependency point in the 
software program; 

a mathematical computation that includes the runtime value of the silent guard 
variable and an expected term, the expected term being set based on the expected value of 
the silent guard variable at the first dependency point; 

wherein the runtime value of the program variable at the second dependency point is 
dependent on the result of the mathematical computation which is dependent on the runtime 
value of the silent guard variable at the first dependency point, such that the runtime value of 
the program variable at the second dependency point will not equal the expected value of the 
program variable at the second dependency point if the runtime value of the silent guard 
variable at the first dependency point does not equal the expected value of the silent guard 
. variable at the first dependency point, which will cause the software program to execute 
improperly. 
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1 07. (New) The recordable computer media of claim 1 06, wherein the first dependency point is 
separated from the second dependency point by a plurality of program instructions. 

1 08 . (New) The recordable computer media of claim 1 06, the tamper resistant software 
program further comprising an instruction setting the value of the program variable at the second 
dependency point equal to a function of the runtime value of the program variable and the result 
of the mathematical computation. 

1 09. (New) A recordable computer media having a tamper resistant software program recorded 
thereon, the tamper resistant software program comprising: 

a program block for causing improper execution of the software program, the 
program block including at least one program instruction; 

a silent guard in the software program having an expected value at the start of 
execution of the program block; and 

a branch instruction in the software program dependent on the runtime value of the 
silent guard, wherein the branch instruction will cause the program block to be executed if 
the runtime value of the silent guard is not equal to the expected value of the silent guard, 
causing the program to execute improperly. 

110. (New) The recordable computer media of claim 1 09, the tamper resistant software 
program fiirther comprising a program variable having an expectied value at an insertion point; 
wherein the runtime value of the silent guard is dependent on the runtime value of the program 
variable, such that the runtime value of the silent guard equals the expected value of the silent 
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guard if the runtime value of the program variable equals the expected value of the program 
variable at the insertion point. 

111. (N ew) The recordable computer media of claim 1 1 0, wherein the insertion point is separated 
from the branch instruction by a plurality of program instructions. 

112. (N ew) The recordable computer media of claim 1 1 0, wherein the runtime value of the silent 
guard is dependent on the runtime value of the program variable using a mathematical computation 
that includes the runtime value of the program variable, wherein the result of the mathematical 
computation is corrupted if the runtime value of the program variable is not equal to the expected 
value of the program variable at the insertion point. 

113. (New) The recordable computer media of claim 112, wherein the mathematical computation 
includes an expected term, the expected term being set based on the expected value of the program 
variable at the insertion point. 

114. (New) A method for adding tamper resistance to a software program, the method 

comprising: 

adding a program block that causes improper execution of the software program, the 
program block including at least one program instruction; 

inserting a branch instruction at the start of execution of the program block; 

making the branch instruction dependent on a silent guard having an expected value 
and a runtime value, such that the branch instruction causes the program block to be executed 
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if the runtime value of the silent guard is not equal to the expected value of the silent guard, 
which causes the software program to execute improperly. 

115. (New) The method of claim 1 1 4, further comprising: 

identifying a program variable in the software program having an expected value at an 
insertion point; 

making the runtime value of the silent guard dependent on the runtime value of the 
program variable, such that the runtime value of the silent guard equals the expected value of the 
silent guard if the runtime value of the program variable equals the expected value of the 
program variable at the insertion point. 

1 16. (New) The method of claim 1 15, wherein the insertion point is separated from the branch 
instruction by a plurality of program instructions. 

117. (New) The method of claim 115, wherein the runtime value of the silent guard is dependent 
on the runtime value of the program variable using a mathematical computation that includes the 
runtime value of the program variable, wherein the result of the mathematical computation is 
corrupted if the runtime value of the program variable is not equal to the expected value of the 
program variable at the insertion point. 
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118. (New) The method of claim 117, wherein the mathematical computation includes 
expected term, the expected term being set based on the expected value of the program variable at 
the insertion point. 



16 



